Tip my tokens

Fund the compute behind my open source — every tip becomes AI inference credit I can spend on any model.

---

Note

I build sharp, single-purpose tools — mostly in Rust and Zig, sometimes in Go or Python. Security scanners, developer utilities, AI infrastructure, and the occasional absurd experiment. On GitHub since 2008. Everything ships.

gitmesh.app · [email protected] · linkedin

---

About

I'm a systems-level software engineer focused on security tooling, developer infrastructure, and AI-native systems. Most of my work lives at the intersection of offensive security, protocol engineering, and CLI design — shipping single-binary tools with minimal dependencies that solve one problem well.

• Security research — network beacon detection, distributed scanners, web fuzzers, OSINT frameworks, and supply-chain forensics
• Developer tools — self-hosted tunnel servers, webhook inspectors, deterministic crawlers, and CI/CD automation
• AI infrastructure — Model Context Protocol (MCP) servers, multi-agent coordination protocols, and DSLs for composable AI systems
• Systems programming — Rust-first, with production work in Zig, Go, Python, TypeScript, and Nim
• Open source — 40+ original public tools, all designed to be auditable and forkable

I care about software that is small, correct, and observable. If it can't be deployed with scp and run without a runtime, it's probably too complicated.

---

Languages & Tools

Rust Zig Go Python TypeScript Nim Shell Docker PostgreSQL Redis SQLite

---

Recently Shipped

Repository	Description	Lang	Last push
leet-index	Activity-aware rankings for US-based GitHub developers, with transparent scoring and…	$\texttt{JavaScript}$	2026-10-08
copyleftdev.github.io	Canonical, self-regenerating identity page for copyleftdev — schema.org Person, llms.txt, and…	$\texttt{HTML}$	2026-10-07
kilo-data	Open threat-intelligence and IP-reputation ETL for phishing and abuse screening, with BGP and…	$\texttt{Rust}$	2026-10-07
vulngraph-data	Deterministic data pipeline for VulnGraph — ingests 11 vulnerability sources, publishes…	$\texttt{Rust}$	2026-10-07
kahea	OpenAPI testing and deterministic API fuzzing for AI agents—catch contract bugs before unsafe…	$\texttt{Rust}$	2026-10-02
shard-router	Deterministic-first shard router for the Kalshi exchange: verified shard resolution, exact…	$\texttt{Makefile}$	2026-09-29

_{This section and the metrics panel above are regenerated nightly by a stdlib-only Python script querying the GitHub API — no third-party stats services, nothing to go stale.}

---

Selected Repositories

Security & Detection

Repository	Description	Language
floq	C2 beacon detection via Floquet spectral analysis — pcap, live capture, or OTLP; 274 KB binary	$\texttt{Zig}$
anomalyx	Contract-first anomaly detection across ~30 formats — logs, pcap, OTLP; deterministic CLI	$\texttt{Rust}$
fatt	Distributed async scanner for exposed files across millions of domains	$\texttt{Rust}$
fuf	Fast next-generation web fuzzer	$\texttt{Rust}$
robin-smesh	Decentralized dark web OSINT framework — Tor crawling, artifact extraction	$\texttt{Rust}$
mini-shai-hulud-dragnet	Forensic dataset + live dashboard for the 2026 npm supply-chain worm — 1,117 dropbox repos, 47 IOCs	$\texttt{Shell}$

Systems & Developer Tools

Repository	Description	Language
tailx	Live system cognition engine — tail reimagined: anomalies, traces, structured JSON; 144 KB	$\texttt{Zig}$
coelacanth	AI-first Unix primitives, clean-room reimplemented under one machine-checkable contract	$\texttt{Zig}$
palimpsest	Deterministic crawl kernel — same seed, identical crawl; JA3/JA4 impersonation, WARC++	$\texttt{Rust}$
hook-bin	Single-binary webhook inbox — embedded SQLite, live dashboard, zero deps	$\texttt{Rust}$
zgrok	Self-hosted ngrok alternative built on Tokio	$\texttt{Rust}$
cora	Multi-pattern fixed-string matcher — Aho-Corasick + SIMD on mmap'd files, NDJSON output	$\texttt{Rust}$

AI & Agent Infrastructure

Repository	Description	Language
smesh-rust	Decentralized coordination protocol for multi-agent LLM systems — QUIC P2P, sub-µs signal diffusion	$\texttt{Rust}$
vajra	Deterministic semantic reduction engine for structured data — break noise, preserve truth	$\texttt{Rust}$
agent-calc	AI-native exact calculator — typed JSON math, symbolic reasoning, mutation-tested	$\texttt{Rust}$
sigmos	DSL for defining AI-native, composable, reactive systems	$\texttt{Rust}$
mcp-flow	WebTransport binding for MCP — QUIC streams, no head-of-line blocking	$\texttt{Multi}$
toon-zig	TOON (Token-Oriented Object Notation) — 30–60% token reduction for LLMs	$\texttt{Zig}$

Education & the Absurd

Repository	Description	Language
humanlang	Token bucket rate limiter implemented in 37 languages (1957–2016)	$\texttt{Multi}$
git-archaeology-lab	Hands-on exercises for forgotten git commands — crafted history, real bugs, real bisect targets	$\texttt{Shell}$
gitfoo_episode_1	Git Black Belt Masterclass — the other 90% of git most devs never use	$\texttt{Python}$
OverHelloWorld	Intentionally over-engineered Hello World — DDD, CQRS, event sourcing, telemetry	$\texttt{Go}$
fafoaas	FAFO as a Service — spec-first engineering masterclass; AsyncAPI 3 + MCP, 98/98 mutation score	$\texttt{TS}$
tip-to-tip-efficiency	Mathematically serious crate for a deeply unserious Silicon Valley efficiency empire	$\texttt{Rust}$

---